new type of email spam

[Anton Krall <ak...@intruder.com.mx>]

Guys, today I got a flow of new type of spam, this new email has some sort
of gif or image inside that contains like a letter or some letters...
Hasanybody seens this and know how to block it?

RE: new type of email spam

[Anton Krall <ak...@intruder.com.mx>]

Ill try that, thx Matt 

|-----Original Message-----
|From: Matt Kettler [mailto:mkettler_sa@comcast.net] 
|Sent: Thursday, April 27, 2006 11:44 PM
|To: Anton Krall
|Cc: users@spamassassin.apache.org
|Subject: Re: new type of email spam
|
|Anton Krall wrote:
|> Guys, today I got a flow of new type of spam, this new email 
|has some 
|> sort of gif or image inside that contains like a letter or 
|some letters...
|> Hasanybody seens this and know how to block it?
|>   
|I've seen two variants of this. One doing stock pump-and-dump 
|scams, one doing 419 scams.
|
|Both seem to be fairly well covered by using Razor at my site.
|
|The SARE stocks ruleset also helps, as it has some rules 
|looking for filename patterns of the stock ones.
|
|
|>
|>
|>   
|
|

Re: new type of email spam

[Matt Kettler <mk...@comcast.net>]

Anton Krall wrote:
> Guys, today I got a flow of new type of spam, this new email has some sort
> of gif or image inside that contains like a letter or some letters...
> Hasanybody seens this and know how to block it?
>   
I've seen two variants of this. One doing stock pump-and-dump scams, one
doing 419 scams.

Both seem to be fairly well covered by using Razor at my site.

The SARE stocks ruleset also helps, as it has some rules looking for
filename patterns of the stock ones.


>
>
>